CVE-2026-82855

score

0.3

cvss

9.8

epss

0.6%

published

2026-08-31

kev added

—

first seen

2026-10-21

@hulumi/policies < 1.3.2 contains an evidence validation bypass caused by improper validation in Cloudflare and deployment-governance validators, letting attackers suppress violations by submitting unrelated compliant evidence, exploit requires crafted evidence from different resources.